HHS Puts Health Privacy Guidance On Web

One section of the guidance deals with health-related marketing and communications. The section notes, for example, that whether the federal health privacy regulation affects a disease management program “depends on the specifics of how the activity is conducted.”

Another section, on “business associates,” says entities covered by the health privacy regulation must take action when they learn that associated businesses are violating the health privacy rules. But covered entities do not have an obligation to actively monitor or oversee business associates’ privacy protection programs, HHS says.